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Abstract — Energy  efficiency  is  a  fundamental  issue  for  out¬ 
door  sensor  network  systems.  This  paper  presents  the  design 
and  implementation  of  multi-dimensional  power  management 
strategies  in  VigilNet,  a  major  recent  effort  to  support  long¬ 
term  surveillance  using  power-constrained  sensor  devices.  We 
integrate  a  novel  tripwire  service  with  an  effective  sentry  and 
duty  cycle  scheduling  in  order  to  increase  the  system  lifetime, 
collaboratively.  Through  extensive  system  implementation,  we 
demonstrate  the  feasibility  to  achieve  high  surveillance  perfor¬ 
mance  and  energy  efficiency,  simultaneously.  We  invest  a  fair 
amount  of  effort  to  evaluate  our  architecture  with  a  network 
of  200  XSM  motes  in  an  outdoor  environment,  an  extensive 
simulation  with  10,000  nodes,  as  well  as  an  analytical  probabilistic 
model.  These  evaluations  demonstrate  the  effectiveness  of  our 
integrated  approach  and  identify  many  interesting  lessons  and 
guidelines,  useful  for  the  future  development  of  energy-efficient 
sensor  systems. 

I.  Introduction 

VigilNet  is  a  recent  major  effort  to  support  long-term 
military  surveillance,  using  large-scale  micro-sensor  networks. 
Besides  requirements  of  accurate  target  tracking  and  classifi¬ 
cation  [1],  one  of  the  key  design  goals  of  VigilNet  is  to  achieve 
long-term  surveillance  in  a  realistic  mission  deployment.  Due 
to  the  small  form  factor  and  low-cost  requirements,  sensor 
devices  such  as  the  XSM  motes  [2]  are  normally  equipped 
with  limited  power  sources  (e.g.,  two  AA  batteries).  Moreover, 
because  of  the  hostile  environment  and  a  large  number  of 
nodes  deployed,  currently  it  is  not  operationally  and  economi¬ 
cally  feasible  to  replace  the  power  source  without  introducing 
enormous  effort  and  elements  of  risk  to  the  military  personnel. 
In  addition,  the  static  nature  of  the  nodes  in  the  field  prevents 
the  scavenging  of  the  power  from  ambient  motion  or  vibra¬ 
tion  [3]  [4].  The  small  form  factor  and  possible  lack  of  the 
line  of  sight  (e.g.,  deployment  in  the  forest)  make  it  difficult 
to  harvest  solar  power.  On  the  other  hand,  a  3~6  month  system 
life  span  is  essential  to  guarantee  the  effectiveness  of  normal 
military  operations,  which  necessitates  a  12~24  fold  extension 
of  the  normal  lifetime  of  active  sensor  nodes.  Consequently,  it 
is  critical  to  investigate  practical  approaches  of  spending  the 
power  budget  effectively. 

Many  solutions  have  been  proposed  for  energy  effi¬ 
ciency  at  various  levels  of  the  system  architecture,  rang¬ 
ing  from  the  hardware  design  [5]  [2],  coverage  [6]  [7]  [8]  [9] 
MAC  [10] [11] [12],  routing  [13] [14] [15],  data  dissemina¬ 
tion  [16],  data  gathering  [17][18],  data  aggregation  [19][20], 
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data  caching  [21],  topology  management  [22],  clustering  [23], 
placement  [24]  [25]  to  energy-aware  applications  [26]  [27]. 
Instead  of  focusing  on  a  single  protocol,  our  answer  to  energy 
efficiency  is  an  integrated  multi-dimensional  power  manage¬ 
ment  system.  Our  contributions,  presented  in  this  paper,  are 
identified  in  the  following  aspects:  1)  Our  design  is  vali¬ 
dated  through  an  extensive  system  implementation:  VigilNet 
-  a  large-scale  sensor  network  system  delivered  to  military 
agencies.  2)  VigilNet  takes  a  systematic  approach,  and  the 
energy  efficiency  is  not  narrowly  accounted  for  within  a  single 
protocol.  We  propose  a  novel  tripwire  service,  integrated  with 
an  effective  sentry  and  duty  cycle  scheduling  to  increase  the 
system  lifetime,  collaboratively.  3)  Tradeoffs  are  investigated 
to  meet  requirements  of  both  surveillance  performance  and  the 
network  lifetime.  We  present  a  complete  system  with  40,000 
lines  of  code,  running  on  motes,  that  achieves  performance  and 
energy  efficiency  simultaneously.  4)  We  devote  considerable 
effort  to  evaluate  the  system  with  200  XSM  motes  in  an 
outdoor  environment  and  an  extensive  simulation  of  10,000 
nodes,  in  order  to  identify  a  set  of  useful  lessons  and  guidelines 
for  future  research. 

The  remainder  of  the  paper  is  organized  as  follows:  Sec¬ 
tion  II  categorizes  power  management  features  for  different 
application  scenarios.  Section  III  describes  the  power  manage¬ 
ment  requirements  in  VigilNet.  Section  IV  introduces  three 
power  management  strategies  utilized  in  VigilNet  namely, 
sentry  service,  tripwire  service  and  duty  cycle  scheduling.  Sec¬ 
tion  V  describes  the  integrated  power  management  architecture 
in  VigilNet.  Section  VI  briefly  discusses  some  additional 
energy  efficient  techniques  applied  in  VigilNet.  Section  VII 
addresses  the  tradeoff  between  energy  efficiency  and  network 
performance.  Section  VIII  details  the  system  implementation. 
Section  IX  provides  the  evaluation  of  a  network  of  200  XSM 
motes  as  well  as  an  extensive  hybrid  simulation  with  10,000 
nodes.  Finally,  Section  X  concludes  the  paper. 

II.  Background 

Power  management  is  by  no  means  a  stand-alone  research 
issue.  It  can  be  dramatically  affected  by  the  underlying  system 
configuration  and  by  the  application  requirements.  These  in¬ 
clude  the  form  factor  [28],  hardware  capability  [5],  possibility 
of  energy  scavenging  [4]  [29],  network/sensing  topology  and 
density  [6],  link  quality  [30],  event  patterns,  node  mobility, 
availability  and  accuracy  of  time  synchronization  [31],  real¬ 
time  requirements  and  the  nature  of  the  applications  [26].  At 
the  hardware  level,  multi-level  sleep  modes  in  the  low  power 
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microcontroller  [5]  enable  software  to  control  the  rate  of  power 
dissipation.  Fine-grained  power  control  [2]  allows  applications 
to  activate  hardware  modules  incrementally.  Radio  wakeup 
circuits  [32]  achieve  passive  vigilance  with  a  minimal  power 
draw.  Energy  scavenging  [3]  is  also  possible  for  some  ap¬ 
plication  scenarios,  where  ambient  energy  can  be  harvested. 
Sensing  coverage  schemes  [6]  [7]  exploit  redundancy  in  the 
node  deployment  to  activate  only  a  subset  of  nodes.  The 
coordinated  scheduling  of  the  sensor  duty  cycle  [33]  increases 
the  probability  of  detection  and  reduces  the  detection  delay 
with  a  minimal  power  consumption.  Communication  protocols 
turn  off  the  radio  when  a  node  is  not  the  intended  receiver  [12]. 
Though  many  individual  solutions  are  proposed,  few  real 
systems  actually  achieve  power  efficiency  comprehensively, 
which  makes  the  integrated  approach  in  VigilNet  novel  and 
practically  useful.  Considering  the  diversity  of  the  different 
approaches,  we  categorize  power  management  strategies  in 
the  context  of  two  types  of  systems:  sampling  systems  and 
surveillance  systems. 


A.  Power  Management  in  Sampling  Systems 

Great  Duck  Island  [26]  and  Structural  Monitoring  [27]  are 
typical  sampling  systems,  which  are  deployed  as  distributed 
large-scale  data  acquisition  instruments.  Power  management 
strategies  in  these  systems  normally  make  use  of  the  following 
techniques: 

•  Predefined  sampling  schedules:  Most  environmental 
phenomena,  such  as  temperature,  exist  ubiquitously  over 
space  and  continuously  over  time.  The  static  nature  of 
these  phenomena  makes  it  sufficient  to  construct  the 
data  profile  by  sampling  the  environment  within  discrete 
time  and  space.  Nodes  can  conserve  energy  by  turning 
themselves  off,  according  to  a  predefined  schedule. 

•  Synchronized  and  coordinated  operations:  Once  the 
sampling  interval  is  defined  a  priori ,  nodes  can  commu¬ 
nicate  in  a  synchronized  fashion.  With  a  precise  time  syn¬ 
chronization  [31],  a  receiver  can  turn  on  the  radio  module 
right  before  the  message  payload  arrives.  Consequently, 
we  can  avoid  low-power  listening  over  radio  [10]  during  a 
non-active  period.  In  addition,  with  the  knowledge  about 
the  sending  rate  of  individual  nodes,  we  are  able  to 
estimate  the  link  quality  without  control  messages  [34]. 

•  Data  aggregation  and  compression:  Since  channel  me¬ 
dia  access  is  costly,  especially  when  the  receiver  is  in 
a  deep-sleep  state  [10],  it  is  beneficial  to  send  out  one 
aggregate  containing  multiple  sensing  readings  [19]  [20]. 
In  addition,  due  to  the  value  locality  of  the  sensed  data, 
we  can  compress  the  total  number  of  bits  to  be  sent  over 
the  air.  Since  both  aggregation  and  compression  need 
to  buffer  a  relatively  large  number  of  readings,  which 
introduces  a  certain  delay,  they  are  not  quite  suitable  for 
time-critical  surveillance  systems.  However,  they  match 
most  sampling  systems  very  well. 


B.  Power  Management  in  Surveillance  System 

On  the  other  hand,  operations  in  surveillance  sys¬ 
tems  [35]  [36] [37]  [38],  such  as  VigilNet,  are  event-driven  in 
nature.  In  surveillance  systems,  we  are  more  interested  in  the 
data  profile  between  inception  and  conclusion  of  the  transient 
events.  These  systems  should  remain  dormant  in  the  absence 
of  the  events  of  interests,  and  switch  to  an  active  state  to  obtain 
high  fidelity  in  detection.  Normally,  the  surveillance  systems 
improve  the  system  lifetime  through  the  following  approaches: 

•  Coverage  control:  Surveillance  systems  are  normally 
deployed  with  a  high  density  (For  instance,  the  default 
configuration  of  VigilNet  [38]  has  28  nodes  per  nominal 
radio  range  (30  m))  for  the  sake  of  robustness  in  detection 
and  fine-grained  sensing  during  tracking.  We  can  increase 
the  system  lifetime  by  activating  only  a  subset  of  nodes 
at  a  given  point  of  time,  waiting  for  potential  targets. 

•  Duty  cycle  scheduling:  The  duration  of  transient  events 
within  the  area  of  surveillance  is  normally  non-negligible. 
By  coordinating  nodes’  sleep  schedules,  we  can  conserve 
energy  without  noticeably  reducing  the  chance  of  de¬ 
tection.  Duty  cycle  scheduling  is  different  from  sample 
scheduling  in  the  sense  that  duty  cycle  scheduling  is 
at  the  micro-scale  (milliseconds  vs.  minutes)  and  it  is 
strongly  affected  by  the  dynamics  of  the  events  (e.g., 
target  velocity). 

•  Incremental  activation:  The  sampling  systems  are  nor¬ 
mally  designed  for  data  logging.  At  each  sample  instance, 
all  sensors  should  be  activated  to  obtain  a  complete  data 
profile.  In  contrast,  surveillance  systems  are  designed 
to  detect  transient  events  of  interest.  It  is  sufficient  to 
activate  only  a  subset  of  sensors  for  the  initial  detection. 
After  the  initial  detection,  we  can  activate  other  sensors 
to  achieve  a  higher  sensing  fidelity  and  to  perform 
classification. 

III.  Power  Management  Requirements  in  VigilNet 

Our  power  management  strategies  are  motivated  by  a  typical 
military  surveillance  application.  The  mission  objective  of 
such  a  system  is  to  conduct  remote,  persistent,  clandestine 
surveillance  to  a  certain  geographic  region  to  acquire  and 
verify  enemy  capabilities  and  transmit  summarized  intelli¬ 
gence  worldwide  in  a  near-real  time  manner.  Several  system 
requirements  affect  our  power  management  design  within 
VigilNet: 

•  Continuous  surveillance:  Due  to  the  dynamic/transient 
nature  of  the  event,  VigilNet  is  required  to  provide 
continuous  surveillance.  This  requirement  significantly 
affects  the  overall  architecture  of  power  management 
strategies  and  the  degree  of  energy  conservation  VigilNet 
can  achieve. 

•  Real-time:  As  a  real-time  online  system  for  target  track¬ 
ing,  VigilNet  is  required  to  cope  with  fast  changing 
events  in  a  responsive  manner.  The  delays  introduced 
by  the  power  management  directly  affect  the  maximum 
target  speed  our  VigilNet  can  track.  It  is  an  essential 


design  tradeoff  to  balance  between  network  longevity  and 
responsiveness. 

•  Rare  and  critical  event  detection:  Due  to  the  nature  of 
military  surveillance,  VigilNet  deals  with  the  rare  event 
model.  In  this  model,  the  total  duration  of  events  is  small, 
compared  to  the  overall  system  lifetime.  On  the  other 
hand,  events  are  so  critical  that  the  power  management 
becomes  a  secondary  consideration  in  the  presence  of 
events. 

•  Stealthiness:  Deployed  in  hostile  environments,  it  is  vital 
for  VigilNet  to  have  a  very  low  profile.  Miniaturization 
makes  nodes  hard  to  detect,  physically;  however,  radio 
messages  can  be  easily  intercepted  if  nodes  frequently 
communicate.  Power  management  protocols  designed  for 
VigilNet  should  maintain  silence  during  surveillance  in 
the  absence  of  significant  events. 

•  Flexibility:  We  envision  the  deployment  of  VigilNet 
under  different  densities,  topologies,  sensing  and  commu¬ 
nication  capabilities.  Therefore,  it  is  essential  to  design 
a  power  management  architecture  that  is  flexible  enough 
to  accommodate  various  system  scenarios. 

IV.  Key  Power  Management  Strategies  in  VigilNet 

In  order  to  achieve  long-term  surveillance  that  meets  the 
military  requirement  (e.g.,  3~6  months),  an  aggressive  12^24 
fold  life-time  extension  is  essential.  Our  initial  investiga¬ 
tion  [38]  indicates  that  a  single  power  management  strategy 
is  neither  sufficient  nor  flexible.  Therefore  we  restructure 
our  prototype  system  described  in  [38]  by  adding  a  new 
combination  of  tripwire  service  and  duty  cycle  scheduling. 
We  believe  this  is  the  right  direction  to  pursue.  In  this  section, 
we  detail  three  main  strategies,  namely  the  tripwire  service, 
sentry  service  and  duty  cycle  scheduling,  before  presenting  an 
overarching  architecture  in  the  next  section.  In  order  to  support 
these  strategies,  all  nodes  within  VigilNet  find  their  positions 
with  an  accuracy  of  1~2  meters  and  they  synchronize  with 
each  other  within  l^-TO  milliseconds  using  the  techniques 
described  in  [39]  and  [31],  respectively.  Long-range  commu¬ 
nication  devices  are  deployed  as  bases  to  relay  sensor  reports 
outside  of  the  sensor  field. 

A.  Tripwire  Services 

This  section  proposes  a  novel  network-wide  power  manage¬ 
ment  strategy  called  Tripwire  Service.  This  service  divides  the 
sensor  field  into  multiple  sections,  called  tripwire  sections ,  and 
applies  different  working  schedules  to  each  tripwire  section.  A 
tripwire  section  can  be  either  in  an  active  or  a  dormant  state,  at 
a  given  point  of  time.  When  a  tripwire  section  is  dormant,  all 
nodes  within  this  section  are  put  into  a  deep- sleep  state  to  save 
energy.  Surveillance  in  active  tripwire  sections  can  be  done  by 
either  turning  all  nodes  on  or  applying  coverage  algorithms 
such  as  the  sentry  service  discussed  later  in  Section  IV-B. 
The  rationale  behind  the  tripwire  service  is  the  existence  of 
roads  in  the  area  of  interest.  By  deploying  the  tripwire  along 
the  road,  we  can  guarantee  the  detection  without  activating  all 
sensors  in  the  area. 
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Fig.  1.  Four  Different  Partition  Methods 

1 )  Tripwire  partition:  VigilNet  implements  its  tripwire  par¬ 
tition  policy  based  on  the  Voronoi  diagram.  A  network  with 
n  bases  is  partitioned  into  n  tripwire  sections  such  that  each 
tripwire  section  contains  exactly  one  base  i  and  every  node  in 
that  tripwire  section  is  closer  to  its  base  i  than  to  any  other  base 
inside  the  sensor  field.  Every  node  in  the  network  uniquely 
belongs  to  one  and  only  one  tripwire  section.  The  rational 
behind  Voronoi  partition  is  to  reduce  the  energy  consumption 
and  the  end-to-end  delay  in  data  delivery. 

The  positions  of  bases  directly  determine  the  layout  of  trip¬ 
wire  sections  and  affect  the  routing  path  length  for  individual 
nodes.  The  optimal  base  placement  method  to  minimize  the 
average  path  length  to  the  nearest  base  can  be  found  at  [40] .  In 
practice,  the  base  placement  strategy  is  normally  determined 
by  the  mission  plan  and  topology. 

2)  Tripwire  partition  mechanism:  This  section  describes 
the  mechanism  to  enforce  the  tripwire  partition  policy.  At  the 
beginning  of  the  tripwire  partition  operation,  each  base  broad¬ 
casts  one  initialization  beacon,  to  its  neighbors  with  a  hop- 
count  parameter  initialized  to  one.  Link  Symmetry  Detection 
[41]  is  used  to  ensure  beacons  can  only  be  received  through 
high  quality  symmetric  links.  Each  receiving  node  maintains 
the  minimum  hop-count  value  of  all  beacons  it  received  from 
the  nearest  base,  in  terms  of  the  physical  distance,  and  ignores 
beacons  with  higher  hop-count  values  and  those  beacons  from 
other  bases.  Beacons  are  flooded  outward  with  hop-count 
values  incremented  at  every  intermediate  hop.  Through  this 
mechanism,  all  nodes  in  the  network  get  the  shortest  high 
quality  path,  in  hops,  to  the  nearest  base,  in  physical  distance. 
While  the  above  mechanism  is  intuitive,  the  design  deserves 
some  further  clarification.  First,  the  boundaries  between  parti¬ 
tions  are  well  delimited  if  we  partition  the  network  according 
to  the  physical  distance  between  sensor  nodes  and  bases 
(Figure  1A  and  1C).  If  the  communication  hop  is  used  instead, 
the  radio  irregularity  and  the  interference  cause  partitions  to 
interleave  with  each  other  (Figure  IB  and  ID).  This  brings 
complexity  and  uncertainty  to  the  design  of  optimal  tripwire 
placement  strategies.  Second,  it  is  beneficial  to  use  hop  counts 
to  build  diffusion  trees  within  each  partition,  because  1)  the 
normal  geographic-based  routing  does  not  guarantee  high- 
quality  shortest  path  to  the  root.  2)  Due  to  the  existence  of 


high-quality  long  links,  a  smaller  number  of  nodes  become 
active  backbone  nodes  in  the  hop-based  routing  than  in  the 
geographic-based  routing.  Finally,  this  design  provides  certain 
robustness  to  the  base  failure.  If  a  base  fails,  the  sensor  field 
can  be  easily  repartitioned  without  this  base. 

3)  Tripwire  scheduling:  A  tripwire  section  can  be  either  in 
an  active  or  a  dormant  state.  We  configure  the  state  of  each 
tripwire  section  by  setting  a  16  bits  schedule  at  the  corre¬ 
sponding  base.  Each  bit  in  the  schedule  denotes  the  state  of  this 
tripwire  section  in  each  round  (rotation)  up  to  16  rounds.  After 
16  rounds,  the  pattern  is  repeated.  With  this  design,  we  can 
assign  65536  different  schedules  to  each  tripwire  and  assign 
65536^  (N  is  the  number  of  tripwires.)  different  schedules  to 
the  network.  The  schedule  can  be  predetermined  or  randomly 
generated.  Random  scheduling  is  done  by  setting  the  Tripwire 
Duty  Cycle  (TDC),  which  is  the  percentage  of  active  rounds 
in  the  schedule. 

B.  Sentry  Services 

In  order  to  exploit  the  high  node  density  within  the  sections, 
we  design  and  implement  a  section-wide  power  management 
strategy,  called  sentry  service.  The  main  purpose  of  the  sentry 
service  is  to  select  a  subset  of  nodes,  which  we  define  as 
sentries ,  in  charge  of  surveillance.  Sentry  selection  contains 
two  phases.  Nodes  first  exchange  neighboring  information 
through  hello  messages.  In  each  hello  message,  a  sender 
attaches  its  node  ID,  position,  number  of  neighbors  and  its 
own  energy  readings.  After  the  first  phase,  each  node  builds  up 
a  one-hop  neighbor  table.  In  the  second  phase,  each  node  sets 
a  delay  timer.  The  duration  of  the  timer  is  calculated  based 
on  the  weighted  Energy  rank  Renergy  and  weighted  Cover 
rank  RCOver  as  shown  in  Equation  1 .  The  energy  rank  Renergy 
is  assigned  according  to  energy  readings  among  neighboring 
nodes  (e.g.,  the  node  with  the  highest  energy  reading  within 
a  neighborhood  has  a  rank  of  1.  )  Similarly,  the  cover  rank 
Rcover  is  assigned  according  to  the  number  of  neighbors 
within  a  node’s  sensing  range.  As  for  current  implementation, 
we  assign  equal  weights  to  both  ranks. 


Ttimer  — 


We  X  Renergy  +  Wc  X  R  cover 

(We  +  Wc)  x  # Neighbors 


MaxDelay  +  Jitter 
(1) 


After  the  delay  timer  fires  in  one  node,  this  node  announces 
itself  as  sentry  by  sending  out  a  declaration  message.  While 
other  nodes,  in  the  vicinity  of  the  declaring  node,  cancel  their 
timers  and  become  dormant  non- sentry  nodes.  The  effective 
range,  in  physical  distance,  of  a  sentry’s  declaration  message 
is  defined  as  the  Range  of  Vicinity  (ROV).  While  the  sentry 
selection  can  be  straightforwardly  implemented,  the  challeng¬ 
ing  part  is  to  choose  and  to  enforce  the  appropriate  range 
of  vicinity  (ROV).  This  parameter  directly  affects  the  sentry 
density,  hence  affects  the  lifetime  of  the  network. 

1 )  How  to  choose  ROV:  The  appropriate  ROV  value  can  be 
chosen  by  the  analytical  intrusion  detection  model  detailed  in 
Appendix.  This  model  describes  the  relationship  between  the 
detection  probability,  the  sensing  range  and  the  sentry  density. 


Fig.  2.  Detection  Prob.  Vs.  Sentry  Density 


Since,  theoretically,  there  is  at  most  one  sentry  within  each 
ROV  range,  according  to  the  circle  covering  theorem  [42],  the 
sentry  density  is  upper  bounded  by  •  Given  the  area 

size,  sensing  range  and  sentry  density,  we  get  the  detection 
probability  (Figures  2)  according  to  the  derived  model.  For  a 
typical  deployment  with  1000  nodes  in  100  x  1000  m2  area, 
Figure  2  indicates  how  to  choose  the  right  combination  of 
system  configurations.  For  example,  in  order  to  achieve  a  99% 
detection  probability,  we  can  choose  either  a  sentry  density  of 
0.008  nodes/m2  (ROV=  6  meters)  with  8  meter  sensing  range 
or  a  lower  density  of  0.004  nodes/m2  (ROV=8.5  meters)  with 
14  meters  sensing  range.  We  note  that  when  ROV  is  set  to  the 
sensing  range,  we  can  guarantee  100%  detection,  assuming  no 
voids. 

2 )  How  to  enforce  ROV:  After  we  choose  a  ROV  value,  we 
need  to  enforce  it  during  the  sentry  selection  phase.  Since  the 
sensing  range  is  normally  smaller  than  the  radio  range,  directly 
using  the  radio  range  as  the  ROV  cannot  guarantee  an  effective 
coverage  of  the  area.  For  example,  the  HMC1002  dual-axis 
magnetometer  used  by  MICA2  has  only  30-feet  effective  range 
for  a  moving  car.  If  we  use  the  Chipcon  radio  (>100  feet)  to 
define  the  range  of  vicinity,  less  than  10%  of  area  is  sensing 
covered.  There  are  two  approaches  to  address  these  issues. 
The  first  approach  is  to  reduce  the  radio  sending  power  to 
emulate  the  ROV  range.  The  power  setting  can  be  chosen 
in  such  a  way  that  there  is  about  one  sentry  within  each 
sensing  range.  The  second  approach  is  to  discard  declaration 
messages  from  any  sentry  beyond  the  distance  of  ROV.  The 
first  approach  achieves  sensing  coverage,  without  the  location 
information  of  the  nodes  [43],  while  the  second  approach 
provides  a  more  predictable  sentry  distribution,  because  the 
emulated  ROV  would  be  affected  by  the  radio  irregularity  in 
the  environment.  Consequently,  we  adopt  the  second  solution 
in  our  system,  given  the  fact  that  localization  [39]  is  supported 
in  VigilNet. 

C.  Sentry  Duty  Cycle  Scheduling 

The  requirement  for  continuous  sensing  coverage  in  the 
sentry  service  imposes  a  theoretical  upper  bound  on  the  system 
lifetime.  This  upper  bound  is  decided  by  the  total  number  of 
nodes  deployed.  Since  a  target  normally  stays  in  the  sensing 
area  of  a  sentry  node  for  a  non-negligible  period  of  time,  it  is 
not  necessary  to  turn  sentry  nodes  on  all  the  time.  By  using 
duty  cycle  scheduling,  we  are  able  to  break  the  theoretical  up- 
perbound  imposed  by  the  full  coverage  algorithms  [7] .  Let  Ton 
be  the  active  duration  and  T0ff  be  the  inactive  duration,  then 
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Fig.  3.  Integrated  PM  Architecture 


than  the  sensing  range  leads  to  a  partial  coverage  and  a  lower 
ROV  value  than  the  sensing  range  leads  to  redundancy  in  the 
coverage.  When  ROV  equals  0  meter,  the  sentry  service  is 
actually  disabled  and  all  nodes  with  the  section  are  awake, 
providing  the  highest  degree  of  coverage.  At  the  third-level, 
duty  cycle  scheduling  controls  the  energy-burning  rate  of 
individual  sentry  nodes  by  manipulating  their  wakeup/sleep 
schedule.  The  Sentry  Duty  Cycle  (SDC)  parameter  is  used  to 
control  the  awareness  of  sentry  nodes,  which  is  the  percentage 
of  active  time.  The  duty  cycle  scheduling  can  be  disabled  by 
setting  SDC  to  100%.  By  adopting  different  values  for  TDC, 
ROV  and  SDC,  we  can  flexibly  adjust  our  power  management 
to  accommodate  different  system  scenarios. 


the  Sentry  Toggle  Period  (STP)  is  defined  as  (Ton  +  T0ff),  and 
the  Sentry  Duty  Cycle  (SDC)  is  defined  as  ipfp-  Theoretically, 
the  duty  cycle  scheduling  can  achieve  unbounded  energy  con¬ 
servation  by  lowering  the  SDC  value.  The  paramount  concern 
of  this  technique  is  that  lowering  the  SDC  value  increases  the 
detection  delay  and  reduces  the  detection  probability.  We  can 
either  effectively  implement  random  duty  cycle  scheduling  or 
more  sophisticated  scheduling  algorithms  to  coordinate  node 
activities  to  maximize  performance.  In  [33],  we  demonstrate 
a  local  optimal  scheduling  coordination  algorithm  to  reduce 
the  detection  delay  and  increase  the  detection  probability. 
We  prove  that,  at  relatively  large  SDC  (e.g  5%  <SDC),  the 
difference  between  random  scheduling  and  optimal  scheduling 
can  be  practically  ignored.  Since  the  random  scheduling  does 
not  need  control  messages  for  coordination  (more  stealthy)  and 
it  is  not  affected  by  time  drift,  we  choose  random  scheduling 
over  the  coordinated  one  in  the  system  implementation. 

V.  Integrated  Solution:  Tripwire-based  Power 
Management  with  Sentry  Scheduling 

To  achieve  an  aggressive  network  lifetime  extension,  the 
VigilNet  power  management  subsystem  integrates  the  three 
strategies  mentioned  in  previous  sections  into  a  multi-level 
architecture,  as  shown  in  Figure  3.  At  the  top  level,  the 
tripwire  service  controls  the  network-wide  distribution  of 
power  consumption  among  sections;  the  uniform  discharge 
of  energy  across  sections  is  achieved  through  the  scheduling 
mechanism  we  discussed  in  section  IV- A. 3.  We  use  a  Tripwire 
Duty  Cycle  (TDC),  which  is  the  percentage  of  active  time 
for  each  tripwire  section,  to  control  the  network-wide  energy¬ 
burning  rate.  There  are  two  special  cases:  when  TDC  equals 
100%,  the  whole  network  becomes  active  and  the  tripwire 
service  is  merely  a  network  partition  service.  When  TDC 
equals  0%,  the  whole  network  is  in  dormant  status  and  it 
can  only  be  awaken  by  external  sources.  At  the  second  level, 
the  sentry  service  controls  the  power  distribution  within  each 
section.  The  uniform  discharge  of  energy  in  a  section  is 
achieved  through  automatic  rotation  strategies  according  to  the 
remaining  power  within  individual  nodes.  We  use  the  Range 
of  Vicinity  (ROV)  parameter  to  control  the  energy-burning 
rate  of  active  sections.  When  ROV  equals  the  sensing  range 
of  nodes,  the  section  is  fully  covered.  A  higher  ROV  value 


VI.  Other  Energy  Conservation  Techniques 

Besides  the  three  main  power  management  strategies,  sev¬ 
eral  other  techniques  have  been  integrated  into  various  aspects 
of  the  VigilNet  system.  Similar  techniques  [20]  [44]  [27]  [10] 
have  been  proposed  in  the  literature  and  we  provide  this  sec¬ 
tion  for  the  completeness  of  the  VigilNet  power  management 
design  and  implementation. 

•  Minimum  connected  dominating  tree:  To  ensure  a 
swift  delivery  of  messages,  VigilNet  requires  an  active 
diffusion  tree  over  active  tripwire  section.  Since  the 
communication  range  is  normally  much  larger  than  the 
sensing  range  [5]  [2],  it  is  possible  to  build  a  diffusion  tree 
on  top  of  sentry  nodes.  To  reduce  the  energy  spent  during 
idle  listening,  VigilNet  desires  a  tree  with  the  minimum 
connected  dominating  set  (a  tree  with  minimum  non¬ 
leaf  nodes).  Since  it  is  a  NP-Complete  problem  to  find 
the  minimum  connected  dominating  set  of  a  graph,  we 
adopt  a  localized  approximation  as  follows:  during  the 
building  process,  each  node  rebroadcasts  the  hop-count 
beacon  after  a  certain  time  delay.  The  delay  in  one  node 
is  inversely  proportional  to  the  number  of  neighbors  and 
the  energy  remaining.  By  doing  so,  the  node  with  more 
neighbors  and  more  energy  left  has  a  higher  chance  to 
become  the  parent  node  within  the  diffusion  tree. 

•  Data  aggregation:  The  channel  media  access  in  wireless 
sensor  network  is  relatively  expensive.  For  example,  in 
the  Chipcon  radio  implementation  for  MICA2,  to  deliver 
a  default  payload  size  of  29  bytes,  the  total  overhead 
is  17  bytes  (37%!),  including  8  bytes  preamble,  2  bytes 
synchronization,  5  bytes  header  and  2  bytes  CRC.  This 
motivates  us  to  utilize  various  kinds  of  aggregation  tech¬ 
niques.  The  first  technique  we  use  is  called  Application- 
Independent  Aggregation,  which  concatenate  data  from 
different  modules  into  one  aggregate,  regardless  of  their 
semantics.  For  example,  system- wide  parameters  can  be 
sent  with  time  synchronization  messages.  The  second 
technique  we  use  is  called  Application-Dependent  Ag¬ 
gregation.  The  tracking  subsystem  in  VigilNet  performs 
the  in-network  aggregation  by  organizing  the  nodes  into 
groups.  Instead  of  each  node  reporting  its  position  sep¬ 
arately,  a  leader  node  calculates  the  weighted  center 
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Fig.  4.  The  VigilNet  System  Architecture 


Fig.  5.  Memory  Layout 


of  gravity  from  multiple  inputs  and  reports  only  one 
aggregate  back  to  the  base. 

•  Implicit  acknowledgement:  Given  that  the  sensor  pay- 
load  is  very  small,  it  might  not  be  energy  efficient  to 
acknowledge  every  packet  explicitly.  Implicit  acknowl¬ 
edgement  can  be  achieved  through  several  approaches. 
They  differ  in  functionality  and  overhead.  B-MAC  [10] 
provides  an  efficient  implementation  of  the  CSMA  proto¬ 
col  with  radio-layer  acknowledgement  support.  Observ¬ 
ing  that  most  of  the  packets  need  to  be  forwarded  for 
routing,  we  alternatively  implemented  the  acknowledge¬ 
ment  as  a  special  field  in  outgoing  packets.  When  there 
are  no  outgoing  packets  for  a  period  of  time,  a  special 
acknowledgement  packet  is  sent. 

•  Incremental  detection:  Multi-sensing  modalities  are  de¬ 
sired  for  achieving  target  classification.  However,  it  is 
not  necessary  to  activate  all  sensors  only  for  detection. 
Among  the  three  types  of  sensors  in  XSM  motes,  the 
optic  TR230  PIR  sensor  has  the  longest  detection  range 
and  a  relatively  low  power  consumption, i.e.,  0.88mW. 
We  use  this  sensor  to  support  the  initial  detection  and 
to  incrementally  wakeup  other  sensors  for  classification 
purposes. 

•  Passive  wakeup  circuitry  :  Several  efforts  [2]  [45]  [32] 
have  been  made  to  support  low-power  passive  wakeup 
by  using  an  acoustic  detector  [45],  infrared  sensor  [2] 
or  radio  [32].  Currently,  the  hardware-event-driven  de¬ 
sign  [2]  of  XSM  motes  is  not  mature  enough  for  VigilNet 
to  exploit  this  aspect.  However,  this  is  a  very  promising 
direction. 

VII.  Tradeoff:  Performance  vs.  Energy  Efficiency 

One  key  research  challenge  for  VigilNet  is  to  reconcile  the 
need  for  network  longevity  with  the  need  for  fast  and  accurate 
target  detection  and  classification.  The  former  requires  most 
sensor  nodes  to  remain  inactive,  while  the  later  desires  many 
active  sensor  nodes.  As  we  mentioned  before,  the  event  model 
directly  affects  the  design  of  the  power  management.  Energy 
efficiency  can  be  comparatively  easy  to  achieve  if  events  of 
interests  are  ubiquitously  present.  The  data  quality  of  some 


events,  such  as  temperature  and  humidity,  are  not  directly 
correlated  with  the  responsiveness  of  the  system.  While  in 
the  surveillance  system,  responsiveness  and  awareness  directly 
affect  the  system  performance  including  tracking  and  classifi¬ 
cation.  The  former  can  be  measured  in  terms  of  the  detection 
probability  and  delay,  and  the  later  can  be  measured  in  terms  of 
the  number  of  nodes  detecting  external  events,  simultaneously. 
We  have  investigated  responsiveness  in  previous  sections  IV-B 
and  IV-C.  This  section  focuses  on  how  to  improve  the  system 
awareness.  In  VigilNet,  awareness  is  supported  by  the  on- 
demand  wakeup  service.  The  on-demand  control  is  stealth- 
ier  compared  to  the  periodic  control  [38],  because  wakeup 
beacons  are  sent  only  when  events  occur.  To  support  the  on- 
demand  control,  we  need  to  guarantee  the  delivery  of  wakeup 
beacons.  Because  of  the  special  stealthiness  requirement,  the 
non- sentries  cannot  synchronize  their  clocks  with  their  sentries 
by  exchanging  messages.  Therefore,  neighboring  non-sentry 
motes  may  no  longer  have  a  sleep- wakeup  cycle  synchronized 
with  each  other  due  to  the  clock  drift,  and  a  sentry  cannot  keep 
track  which  of  its  neighbors  are  awake.  To  guarantee  delivery, 
a  non- sentry  periodically  wakes  up  and  checks  radio  activity 
(detects  preamble  bytes)  once  per  checking  period  (e.g.,  every 
second).  If  no  radio  activity  is  detected,  this  node  goes  back 
to  sleep,  otherwise  it  remains  active  for  a  period  of  time, 
preparing  for  incoming  targets.  If  a  sentry  node  wants  to  wake 
up  all  neighboring  nodes,  it  only  needs  to  send  out  a  message 
with  a  long  preamble  with  a  length  equal  to  or  longer  than  the 
checking  period  of  non- sentry  nodes.  Since  in  the  rare  event 
model,  the  wakeup  operations  are  done  very  infrequently,  the 
long  preamble  doesn’t  introduce  much  energy  consumption 
in  sentry  nodes.  On  the  other  hand,  since  the  amount  of  time 
taken  to  check  the  radio  activity  is  constant  for  a  specific  radio 
hardware,  the  length  of  checking  period  determines  the  energy 
consumption  in  non-sentry  nodes.  In  general,  a  long  checking 
period  leads  to  a  lower  energy  consumption.  However,  to 
ensure  that  a  sentry  node  wakes  up  neighboring  non- sentry 
nodes  before  a  target  moves  out  of  their  sensing  range,  the 
checking  period  can  not  be  arbitrarily  long.  Theoretically,  the 
upperbound  of  checking  period  is  ^ R2~r 2 ;  where  R  is  radio 


Fig.  6.  Location  of  Deployment  and  A  Deployed  XSM  Mote 

range,  r  is  sensing  range  of  sentries  and  S  is  the  speed  of 
target.  Due  to  the  other  delays,  such  as  sensor  warm-up  time, 
the  checking  period  should  be  smaller  than  this  theoretical 
bound.  In  our  implementation,  non-sentry  nodes  have  1%  duty 
cycle  with  1  second  checking  period. 

VIII.  Implementation 

The  power  management  architecture  described  in  Section  V 
has  been  integrated  into  the  VigilNet  system.  We  have  success¬ 
fully  transferred  VigilNet  to  a  military  agency  for  deployment 
by  the  end  of  2004.  The  overarching  architecture  of  VigilNet 
is  shown  in  Figure  4.  The  components  in  gray  are  specially 
designed  for  the  power  management  purpose.  Other  compo¬ 
nents  provide  extra  energy-aware  features,  as  mentioned  in 
section  VI. 

VigilNet  is  built  on  top  of  the  TinyOS  operating  sys¬ 
tem.  TinyOS  supports  a  lightweight  event  driven  computation 
model  with  two-level  scheduling.  VigilNet  is  mostly  written 
in  NesC,  a  derivative  language  from  C  specially  designed  for 
embedded  programming.  This  language  enables  the  program¬ 
mers  to  define  the  interfaces,  functions  of  components  and  the 
relations  (dependencies)  among  them.  The  size  of  VigilNet  is 
about  40,000  lines  of  code,  supporting  multiple  existing  mote 
platforms  including  MICA2  and  XSM.  The  compiled  image 
occupies  83,963  bytes  of  code  memory  and  3,586  bytes  of 
data  memory.  The  code  and  data  memory  maps  are  shown  in 
Figure  5. 

We  categorize  the  system  components  into  seven  groups; 
Data  link  and  sensor  driver  layers  use  default  components 
in  TinyOS;  Network  layer  consists  of  three  major  compo¬ 
nents:  robustness  diffusion  tree,  asymmetric  link  detection  [41] 
and  radio-based  wakeup  service.  The  sensing  layer  provides 
detection  and  classification  with  continuous  calibrator  and 
frequency  filters  [1].  We  note  that  it  is  very  critical  to  have  a 
sensing  subsystem  with  minimal  false  alarms  in  an  outdoor  en¬ 
vironment.  Otherwise,  the  network  lifetime  is  severely  reduced 
due  to  unnecessary  wakeup  operations.  The  application  layer 
focuses  on  tracking  and  high-level  classification  [46].  The 
middleware  layer  occupies  most  code  (40%)  and  data  mem¬ 
ory  (35%).  Among  all  the  middleware  services,  the  tripwire 
service,  sentry  selection,  duty  cycle  scheduling  and  wakeup 


Fig.  7.  Tripwire  Partition 

service  form  the  basis  for  power  management  subsystem.  Their 
functionalities  are  supported  by  other  services.  For  instances, 
the  localization  service  provides  the  basis  for  the  tripwire 
partition  and  sentry  selection.  The  group  management  service 
allows  power-efficient  data  aggregation.  The  configuration 
service  facilitates  the  online  tuning  of  the  power  management 
parameters.  Multilevel  sleep  modes  in  the  ATmegal28  permit 
a  high-granularity  control  of  power  dissipation.  Selectable 
transmission  power  settings  (255  levels)  in  CC1000  enable 
us  to  adjust  the  effective  range  of  sentry  declaration  messages 
dynamically. 

IX.  System  Evaluation 

This  section  presents  experimental  results  that  evaluate 
the  performance  of  the  power  management  subsystem.  The 
experimental  results  in  Section  IX-A  are  obtained  through 
an  actual  deployment  of  200  XSM  motes,  focusing  on  the 
sentry  selection,  tripwire  partition  and  tracking  delays.  Other 
experiments  in  Section  IX-B,  especially  those  related  to  the 
system  lifetime,  require  a  significant  amount  of  time.  Un¬ 
fortunately,  we  currently  can  not  afford  to  deploy  such  a 
large  system  unattended  for  a  long  time.  We  have  to  conduct 
those  evaluations  through  a  hybrid  approach,  which  uses  basic 
measurements  from  a  smaller  number  of  motes  as  input  to 
a  simulator.  By  doing  so,  we  can  investigate  the  impact  of 
different  system  configurations  on  the  performance  of  power 
management. 

A.  Field  Evaluation 

The  field  evaluation  was  done  as  part  of  a  technical  transi¬ 
tion  on  December  2004,  when  we  deployed  200  XSM  motes 
on  a  dirt  T-shape  road  (200  meters  by  300  meters).  The  XSM 
mote  is  designed  by  the  joint  efforts  of  Ohio  State  University 
[2]  and  CrossBow  Inc,  which  features  an  Atmel  ATmegal28L 
microcontroller  and  a  Chipcon  433MHz  CC1000  radio.  Its 
sensing  suite  includes  magnetic,  acoustic,  photo,  temperature 
and  passive  infrared  sensors  (PIR).  Figure  6  displays  the 
environment  where  our  system  was  located  and  the  picture  of 
one  of  the  XSM  motes.  Nodes  are  randomly  placed  roughly  10 
meters  apart,  covering  one  300-meter  road  and  one  200-meter 
road. 


Fig.  8.  Effectiveness  of  Sentry  Selection 


Fig.  9.  ROY  Enforce  Results 


Fig.  10.  Distribution  of  Different  Delays 


1 )  Effectiveness  of  the  tripwire  partition:  One  snapshot  of 
the  network  layout  collected  by  our  GUI  is  shown  in  Figure  7. 
We  placed  200  XSM  field  motes  and  3  mica2dot  base  motes 
in  the  field.  Accordingly,  the  network  is  divided  into  three 
sections.  The  layout  indicates  that  the  Voronoi-based  tripwire 
partitioning  is  very  effective  and  that  all  nodes  attach  to  the 
nearest  base  nodes  through  the  shortest  path. 

2 )  Effectiveness  of  the  sentry  selection:  In  this  experiment, 
we  evaluate  the  effectiveness  of  sentry  selection.  Figure  8 
plots  the  cumulative  distribution  function  of  the  voltages  of 
nodes  within  the  network.  The  left  curve  is  the  voltage  CDF 
of  non- sentry  nodes  and  the  right  curve  is  the  voltage  CDF 
for  sentry  nodes.  It  confirms  that  our  sentry  selection  process 
is  effective  and  that  nodes  with  high  remaining  energy  have  a 
high  probability  to  be  chosen  as  sentries.  For  instance,  none  of 
nodes  with  voltage  below  2.65V  is  chosen  as  a  sentry.  Figure  8 
further  confirms  that  it  is  not  the  case  that  nodes  with  high 
voltages  are  always  selected  as  sentries,  due  to  the  random 
jitter  introduced  in  Equation  1  and  to  the  localized  selection 
process  on  a  non-uniform  distribution  of  XSM  motes. 

3)  Effectiveness  of  ROV  enforcement:  We  also  investigate 
the  effectiveness  of  enforcing  Range  of  Vicinity  (ROV),  when 
we  set  the  system  parameter  ROV  as  10  meters.  Figure  9  shows 
the  cumulative  distribution  function  of  minimum  distances 
between  sentry -pairs.  The  average  minimum  is  9.57  meters 
with  1.88  meters  standard  deviation.  We  note  that  due  to 
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Fig.  11.  Phase  Transition  and  Rotation 


TABLE  I 

Power  consumption  according  to  the  mote  state. 


Node  state 

Radio  State 
(Messages 
per  second) 

Processor 

State 

Sensors 

State 

Total 

Power 

Init 

receive  (2) 

active 

off 

49.449mVU 

SentrySleep 

off  (0) 

sleep 

off 

42  iiW 

NonSentry  Sleep 

LPL  (0) 

sleep 

off 

450 nW 

AwakeComm 

receive  (2) 

active 

off 

49. 449m  W 

AwakeCommSensing 

receive  (2) 

active 

on 

71.45  mW 

AwakeSensing 

receive  (0) 

active 

on 

70.01  mW 

the  radio  irregularity  introduced  by  the  ground  effect  in  the 
outdoor  environments,  a  small  percentage  of  sentry  nodes  can 
not  reach  each  other,  even  when  they  are  very  close  (<5 
meters)  to  each  other. 

4)  Delays  under  power  management:  In  this  experiment, 
we  investigate  various  delays  under  power  management.  When 
a  target  enters  the  surveillance  area,  a  detection  report  is 
issued  first,  followed  by  classification  reports.  Finally,  after 
sufficient  information  is  gathered,  velocity  reports  are  issued. 
Figure  10  illustrates  the  cumulative  distribution  of  different 
delays.  The  communication  delay  (leftmost  curve)  is  much 
smaller  compared  with  other  delays.  About  80%  of  detections 
are  done  within  2  seconds.  Over  80%  of  the  classification  and 
velocity  estimations  are  made  within  4  seconds.  This  empirical 
result  indicates  that  our  power  management  does  not  degrade 
the  tracking  performance  significantly. 


TABLE  II 

Key  System  Parameters 


Parameter 

Deli  nition 

Default  Value 

SDC 

Sentry  duty  cycle  (see  IV-C) 

25% 

STP 

Sentry  toggle  period  (see  IV-C) 

1  second 

SSA 

Sentry  service  activation 

True 

TN 

Number  of  tripwire  partitions  in  the  network 

1 

TDC 

Tripwire  duty  cycle  percentage  (see  IV-A.3  ) 

100% 

VS 

Target  Speed 

4  m/s 

RN 

Number  of  system  rotations  per  day 

1 

SR 

Sensing  Range 

10  m 

RR 

Radio  Range 

30  m 

B.  Hybrid  Evaluation 

In  the  hybrid  evaluation,  we  use  the  experimental  measure¬ 
ments  from  the  XSM  platform  as  inputs  to  a  discrete  event 


Fig.  12.  InfUence  of  sentry  duty  cycle  (SDC)  on  average  detection  Fig.  15.  Influence  of  sentry  toggle  period  (STP)  on  average  detection 

delay  (ADD).  delay  (ADD). 


Fig.  13.  InfUence  of  sentry  duty  cycle  (SDC)  on  average  detection  delay  Fig.  16.  InfUence  of  sentry  toggle  period  (STP)  on  detection  delay  (DP). 

(ADD)  (the  second  view) 


Fig.  14.  InfUence  of  sentry  duty  cycle  (SDC)  on  detection  probability 
(DP). 


simulator.  This  simulator  emulates  the  multi-phase  VigilNet 
operations  as  shown  in  Figure  11.  We  distribute  10,000  nodes 
randomly  within  a  1,000,000  m2  square.  VigilNet  initializes 
in  three  minutes  with  a  sequence  of  phases  (from  Phase  I  to 

VII) .  After  that,  VigilNet  enters  the  surveillance  phase  (Phase 

VIII) .  The  system  rotates  periodically  to  refresh  system- wide 
soft-states  and  balance  the  power  consumption.  The  number 
of  rotations  per  day  is  defined  as  RN  as  shown  in  Table  II. 
A  target  enters  the  network  randomly  at  one  of  the  edges  and 
exits  randomly  at  the  opposite  edge  of  the  area.  To  emulate  the 
sensing  delay  we  experienced  in  the  real  testbed,  we  consider 
that  a  target  is  detected  when  it  is  within  the  sensing  range  of 
an  active  node  for  at  least  5  milliseconds  and  when  that  node 
can  reach  its  tripwire  base  station  to  report  the  event. 

1)  Battery  model:  We  obtained  similar  empirical  power 
consumption  results  as  reported  in  [2],  which  provides  very 
complete  analysis  of  XSM  motes.  XSM  motes  use  two  stan¬ 
dard  A  A  (A91)  batteries.  Each  battery  has  an  energy  capacity 
uniformly  chosen  between  2,848mAh  and  2,852mAh  [47]. 
However,  to  model  reality  better  [48],  we  suppose  that  a  mote 
dies  when  it  has  used  85%  of  the  available  energy. 

The  sensor  nodes  are  in  one  of  six  power  consumption  states 
at  any  time.  We  list  and  detail  the  power  consumption  of  these 


six  states  in  Table  I.  When  a  message  is  transmitted,  the  radio 
switches  to  the  transmit  state  for  30ms  (a  typical  time  required 
by  XSM  nodes  to  send  a  message  under  the  MAC  contention). 
The  indicated  number  of  messages  per  second  in  Table  I  is  an 
upper  bound  result  from  the  empirical  observations. 

2 )  Performance  metrics  and  system  parameters:  We  inves¬ 
tigate  three  major  performance  metrics  under  different  system 
configurations.  1)  Detection  Probability  (DP),  which  is  the 
percentage  of  successful  detections  among  all  targets  that 
enter  into  the  system  during  one  day.  2)  Average  detection 
Delay  (ADD),  which  is  the  average  time  elapsed  between  the 
entrance  of  a  target  into  the  area  and  its  detection  by  one  of 
sensor  nodes.  3)  Network  lifetime  (NL),  which  is  defined  as 
the  number  of  days  for  which  the  detection  probability  of  a 
target  remains  greater  than  90%.  The  key  system  parameters 
are  listed  in  Table  II.  Unless  mentioned  otherwise,  the  default 
values  in  Table  II  are  used  in  all  experiments.  The  baseline 
for  comparison  is  VigilNet  without  any  power  management. 

3)  Impact  of  the  sentry  service  and  duty  cycle  scheduling : 
In  this  section,  we  evaluate  the  energy  savings  achieved  by 
the  sentry  service  and  the  duty  cycle  scheduling.  In  particular, 
we  study  the  influence  of  the  activation  of  the  sentry  service 
(SSA),  of  the  sentry  duty  cycle  (SDC),  and  of  the  sentry 
toggle  period  (STP)  on  energy  consumption.  One  hundred 
targets  are  simulated  during  each  rotation  to  obtain  statistics 
in  detection  probability,  but  we  take  into  consideration  the 
power  consumption  of  only  ten  of  them  (VN=10)  as  the  real 
workload.  As  previously  mentioned,  we  use  a  network  of 
10,000  nodes  randomly  distributed  within  a  square  of  1km 
edge  length.  Each  node  has  a  radio  range  of  30  meters.  This 
configuration  matches  our  real  system  requirements  dictated 
by  the  military:  nodes  have  an  average  of  27.5  neighbors 
within  their  communication  range,  and  an  average  of  3.1 
neighbors  within  their  sensing  range. 

Figures  12,  13  and  14  show  the  variations  of  the  average 


Fig.  17.  Infbence  of  tripwire  duty  cycle  (TDC)  on  detection  probability 
(DP). 

detection  delay,  detection  probability,  and  network  lifetime, 
according  to  the  sentry  duty  cycle.  Figure  13  takes  a  closer 
look  at  a  particular  section  of  Figure  12.  We  first  observe  that 
without  the  sentry  service  (SSA  =  false),  the  lifetime  of  the 
network  (NL)  is  short:  all  the  nodes  run  out  of  energy  after 
only  four  days.  The  activation  of  the  sentry  service  increases 
the  lifetime  of  the  network  by  approximately  seven  times. 
However,  it  also  slightly  increases  the  average  detection  delay 
of  a  target  by  1  second.  This  could  be  expected  as  the  first 
nodes  that  the  target  encounters  may  be  dormant.  We  note  that 
the  delay  is  relatively  small  (e.g.,  1^2  seconds),  as  shown  in 
Figure  13. 

The  use  of  duty  cycle  scheduling  (SDC^100%)  signifi¬ 
cantly  improves  the  network  lifetime.  For  instance,  with  a  duty 
cycle  of  12.5%,  the  lifetime  of  the  network  is  multiplied  by 
about  five  times.  This  may  be  surprising:  we  would  expect  the 
network  lifetime  when  SDC=12.5%  to  be  approximately  eight 
times  the  network  lifetime  when  SDC=100%.  The  observed 
values  are  due  to  the  energy  consumed  during  the  rotation 
phase  and  when  target  detection  occurs.  These  tasks  consume 
a  non-negligible  amount  of  energy  and  therefore  impose  a  limit 
on  the  network  lifetime. 

We  remark  that  during  the  first  four  days  of  network  oper¬ 
ation,  the  average  detection  delay  is  shorter  when  the  sentry 
duty  cycle  is  higher.  This  could  be  expected  when  a  target 
enters  the  sensing  range  of  a  sentry  node,  this  node  may  be  in  a 
dormant  state.  We  note  that  the  difference  between  the  average 
detection  delays  for  different  values  of  SDC  (Figure  13)  is  no 
more  that  one  second.  This  can  be  explained  by  the  short 
sentry  toggle  period  (1  second). 

Figure  14  shows  the  influence  of  the  sentry  duty  cycle 
(SDC)  on  the  detection  probability.  We  observe  that,  for  all 
configurations,  the  initial  detection  probability  is  100%.  As 
nodes  start  to  run  out  of  power,  the  detection  probability  de¬ 
creases  until  all  the  nodes  become  dysfunctional.  On  average, 
during  the  network  lifetime,  the  successful  detections  reported 
in  Figure  13  occur  between  0.5  second  and  2  second  after  the 
target  entered  the  square  area.  Beyond  the  network  lifetime, 
VigilNet  can  still  detect  the  targets,  however  the  delay  increase 
gradually  as  shown  in  Figure  12. 

In  Figure  15  and  Figure  16,  we  study  the  effect  of  the  sentry 
toggle  period  (STP)  on  the  average  detection  delay  and  the 
detection  probability.  We  fix  the  sentry  duty  cycle  at  25%.  We 
observe  that  a  greater  toggle  period  negatively  impacts  the 
average  detection  delay.  Indeed,  if  the  toggle  period  is  small 
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Fig.  18.  Infbence  of  tripwire  duty  cycle  (TDC)  on  average  detection 
delay  (ADD). 

(e.g.,  1  second),  a  dormant  sentry,  having  a  target  entering 
its  sensing  range,  wakes  up  with  a  high  probability  before 
this  target  exits  the  sensing  range.  Conversely,  if  the  toggle 
period  is  big  (e.g.,  6400  second),  a  dormant  sentry  has  a 
low  probability  of  being  waken  up  before  the  target  leaves 
its  sensing  range. 

Guidelines:  From  the  analysis  of  this  section,  we  can 
conclude  the  following.  First,  to  reduce  the  detection  delay, 
we  must  choose  a  sentry  toggle  period  as  small  as  possible. 
Second,  to  increase  the  network  lifetime,  we  advise  to  select 
a  small  sentry  duty  cycle.  However,  note  that  the  time  during 
which  a  sentry  remains  awake  cannot  be  arbitrarily  small, 
because  it  is  limited  by  the  time  necessary  to  warm  up  the 
sensors  and  by  the  time  necessary  to  gather  enough  sensor 
data  to  infer  whether  there  is  a  target  or  not.  Consequently, 
rapid  sensor  wake  up  and  quick  target  detection  algorithms  are 
features  that  can  significantly  extend  the  lifetime  of  a  sensor 
network.  Efforts  in  this  direction  are  worthwhile. 

4)  Impact  of  the  tripwire  service :  We  investigate  both  the 
grid  and  the  random  placement  of  tripwire  bases.  In  the  case  of 
a  Tripwire  Number  (TN)  greater  than  16,  the  two  placement 
strategies  generate  similar  results.  For  TN  smaller  than  16, 
the  grid  topology  performs  better.  Due  to  space  constraints, 
we  report  here  only  the  results  concerning  the  grid  tripwire 
topology. 

We  configure  the  wireless  sensor  network  as  in  Table  II. 
In  Figures  17  and  18,  we  study  the  impact  of  the  tripwire 
duty  cycle  on  the  performance  of  the  network.  We  use  sixteen 
tripwires.  As  we  would  expect,  the  smaller  the  tripwire  duty 
cycle,  the  longer  the  lifetime  of  the  network.  For  instance, 
when  the  tripwire  duty  cycle  equals  25%,  the  network  life¬ 
time  is  about  twice  the  lifetime  obtained  when  the  tripwire 
duty  cycle  equals  100%.  One  could  expect  a  multiplication 
of  the  lifetime  by  four  times  but  this  would  not  take  into 
consideration  the  energy  consumed  during  the  rotation  phase 
and  when  target  detection  occurs.  Additionally,  we  observe 
that  the  average  detection  delay  is  significantly  longer  when 
the  tripwire  duty  cycle  is  small.  Indeed,  when  the  tripwire 
duty  cycle  is  small,  a  relatively  small  portion  of  the  network 
is  awake  at  any  given  time,  and  the  target  may  cover  a  bigger 
part  of  the  network  without  being  detected.  Finally,  we  notice 
that  a  tripwire  detection  cycle  of  less  than  25%  seriously 
impacts  the  detection  probability  during  the  first  weeks  of 
network  operation.  This  is  due  to  the  fact  that,  with  such  low 
levels  of  tripwire  activity,  a  large  part  of  the  network  may 


Fig.  19.  InfUence  of  target  speed  (VS)  on  average  detection  delay 
(ADD). 


Fig.  20.  InfUence  of  target  speed  (VS)  on  detection  probability  (DP). 


remain  dormant  for  an  extended  period  of  time,  producing 
the  possibility  that  the  target  crosses  the  network  exclusively 
through  such  zones. 

Guidelines:  From  this  section,  we  can  conclude  the  follow¬ 
ing:  a  low  tripwire  duty  cycle  increases  the  network  lifetime, 
but  increases  noteworthily  the  detection  delay  and  decreases 
the  detection  probability.  In  a  grid  deployment,  a  tripwire  duty 
cycle  below  25%  is  detrimental  to  the  performance.  This,  on 
the  other  hand,  indicates  the  importance  of  the  smart  tripwire 
placement  strategy  under  a  low  tripwire  duty  cycle. 

5)  Impact  of  the  targets  speed:  In  this  section,  we  study  the 
effect  of  the  target  speed  on  performance.  The  configuration 
of  the  network  is  the  same  as  in  Table  II.  Figures  19  and  20 
show  the  influence  of  target  speed  on  average  detection  delay 
and  detection  probability.  We  observe  that  a  high  target  speed 
decreases  the  detection  delay.  This  may  be  surprising  as  when 
the  target  speed  increases,  it  spends  less  time  within  the  sens¬ 
ing  range  of  a  given  sensor,  thereby  decreasing  the  probability 
of  being  detected.  However,  as  the  target  speed  increases,  it 
covers  more  motes  in  a  shorter  amount  of  time.  The  effect 
of  target  speed  on  detection  probability  is  insignificant  for 
VS<16m/s.  We  recall  that  the  sensing  range  of  a  sensor  is 
10  meters  in  this  experiment.  At  a  speed  of  16m/s,  the  target 
spends  a  maximum  of  1250ms  within  the  sensing  range  of 
a  given  sensor.  This  duration  is  sufficient  for  a  sensor  to 
differentiate  the  target  from  false  alarms. 

Guidelines:  To  summarize  the  results  from  this  section, 
we  can  conclude  the  following.  First,  it  takes  more  time  to 
detect  slow  targets  than  faster  ones.  Second,  a  network  with 
characteristics  similar  to  the  one  defined  in  this  experiment 
can  handle  targets  with  speeds  typical  of  moving  terrestrial 
objects  (up  to  at  least  16  meters  per  second  i.e.  35.8  miles  per 
hour). 

X.  Conclusion 

This  paper  presents  a  recent  major  effort  to  address  the 
energy  efficiency  for  outdoor  long-term  surveillance.  It  is  a 
comprehensive  case  study  on  power  management  in  a  realistic 
environment  with  a  large  testbed.  We  investigate  the  power 
management  at  the  network,  section  and  node  level  by  us¬ 
ing  a  novel  tripwire  service,  sentry  service  and  duty  cycle 
scheduling,  respectively.  We  invest  a  significant  amount  of 
effort  to  validate  our  system  with  a  network  of  200  XSM 
motes  in  an  outdoor  environment,  an  extensive  simulation  with 
10,000  nodes,  as  well  as  an  analytical  probabilistic  model. 


These  demonstrate  the  effectiveness  of  our  approach  and 
identify  several  useful  guidelines  and  lessons  for  the  future 
development  of  energy-efficient  sensor  systems. 

XI.  Acknowledgements 

This  work  was  supported  in  part  by  the  DAPRPA  IXO 
offices  under  the  NEST  project  (grant  number  F336615-01- 
C-1905),  the  MURI  award  N00014-01-1-0576  from  ONR  and 
NSF  grant  CCR-0098269.  The  authors  specially  thank  the 
NEST  program  manager  Vijay  Raghavan  for  his  valuable 
contributions. 

Appendix 

Figure  21 A  shows  a  rectangular  deployment  area  with  sides 
a  and  b.  N  sensor  nodes  are  uniformly  deployed  in  the  area, 
therefore,  the  node  density  d  is  N/ab.  Assuming  that  the  area 
is  considerably  large,  therefore,  the  number  of  nodes  in  an  area 
of  A  (A  ab)  can  be  approximated  by  a  Poisson  distribution 
with  parameter  A  =  dA.  We  assume  that  the  entry  point  of 
the  intruding  target  (intruder)  is  uniformly  distributed  along  all 
sides,  and  to  make  the  problem  tractable,  we  assume  that  the 
intruder  moves  along  a  straight  line.  The  angle  between  the 
target  direction  and  the  side  where  the  entry  point  is  located 
is  0 ,  which  is  also  considered  uniformly  distributed  and  9  G 
[0, 7r].  The  whole  picture  of  the  intruding  scenario  is  shown  in 
Figure  21  A.  Observe  that  the  area  of  nodes  that  can  detect  the 
intruder  contains  all  points  whose  distances  to  the  intruder’s 
locus  are  no  larger  than  sensing  range  r.  If  the  length  of  the 
intruder’s  locus  in  the  deployment  area  is  L  ,  the  detection 
area  can  be  approximated  by  2 Lr,  without  considering  the 
edge  effect.  Based  on  Poisson  distribution,  the  probability  that 
there  is  at  least  one  node  in  this  area  is  1  —  e~2Lrd. 


Fig.  21.  Intrusion  Model 

As  shown  in  Figure  21B,  the  deployment  area  is  divided 
into  three  regions.  The  length  of  the  intrusion  trace  is: 

{x/ cos  6  Locus  G  A 

b/  sin#  Locus  G  B  (2) 

(x  —  a)  /  cos  6  Locus  G  C 


We  can  calculate  the  expected  detection  probability 
Expected(Pdetection)  that  an  intruder  is  detected  by  at  least 
one  node  by  integrating  over  all  entry  points  on  the  four  adjacent 
sides  of  the  area. 
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l 


7T  —  arctan  — 2rnd 

arctan(a)  e 

0 


Xr"u'ni'V  + 

r 

J  7r  —  arctan(  rnfx  ) 
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